In the claims: 

1 . (original) A method of configuring a lock system (1 00) owned by a lock system owner 
and comprising a management computer (110) connected to a plurality of door access control 
units (120), said method comprising the following steps: a) installing in the door access 
control units a first certificate issued by a manufacturer (10) of the lock system; b) providing 
at the management computer (1 10) a second certificate issued by the lock system owner and 
signed by the manufacturer; c) transmitting from the management computer to a first door 
access control unit of the door access units the signed second certificate together with a 
symmetric encryption key used by the lock system owner; d) installing by means of asymmetric 
encryption the second certificate at the first door access control unit after checking the 
authenticity of the signed second certificate; and e) establishing of symmetric encryption 
communication between the management computer and the first door access unit. 

2. (original) The method according to claim 1, wherein a unique symmetric encryption 
key is used for each door access control unit. 

3. (currently amended) The method according to claim 1 or-2, wherein the step of 
installing a first certificate is performed under the control of a boot strapped security feature in 
the door access control unit. 

4. (currently amended) The method according to claim 1 any of claims 1-3 , wherein the 
step of providing at the management computer a second certificate is performed on-line 
through a procedure, wherein a receiver identifies himself or herself. 

5. (original) The method according to claim 4, wherein the identity of the receiver is 
indicated in the second certificate as attributes. 

6. (currently amended) The method according to claim 1 any of claims 1-5 , wherein the 
step of providing a second certificate comprises providing a symmetric encryption key pair. 

7. (currently amended) The method according to claim 1 any of claims 1-6 , wherein the 
step of transmitting from the management computer to a first door access control unit the 
signed second certificate is preformed as an SSL-session. 

8. (currently amended) The method according to claim 1 any of claims 1-7 , wherein the 
step of installing the second certificate involves keeping the first certificate so as to verify data 
from the manufacturer. 



9. (original) A lock system (100) owned by a lock system owner and comprising a 
management computer (110) connected to a plurality of door access control units (120), 
characterized by - a first certificate issued by a manufacturer (10) of the lock system provided 
in the door access control units (120); - a second certificate issued by the lock system owner 
and signed by the manufacturer provided in the management computer (1 10); - a symmetric 
encryption key pair provided in the management computer and a respective door access 
control unit (120); and - a public asymmetric encryption key for the manufacturer provided in 
the door access control units. 

10. (Original) The lock system according to claim 9, wherein a unique symmetric 
encryption key is provided for each door access control unit. 



